Yes. You will need an AAA server that communicates witht the pix using tacacs+ or radius, and then can connect to a ms win domain controller using NTLM authen. The cisco secure ACS server can fit that role - and it may be able to use Active Directory as well. There are other aaa servers that can do this too.
View the pix documentation online at www.cisco.com for more info about using aaa servers, and the aaa authentication command.
